Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa
File:                     24ec6956-edcc-36c7-8c93-631582aff06f.roa (raw, json)
Hash identifier:          JEboSiPB63JP9NiXMX+Nh9VSWUh+kp0/T1Hc2O8EfA4=
Subject key identifier:   38:7C:50:07:E8:E4:EF:64:7B:C4:F9:E5:28:4E:8A:52:EE:70:AE:E8
Certificate issuer:       /CN=cdc373f2-7aee-4c17-9b33-e9d993543374
Certificate serial:       010D0C9F43285849F2E52EFD7095029CAF9B4F00
Authority key identifier: 4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     400079
IP address blocks:        204.48.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:2e:fd:70:95:02:9c:af:9b:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdc373f2-7aee-4c17-9b33-e9d993543374
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=c5ab7511-7d86-4e78-9015-ff85211f4fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:85:62:f6:48:cd:c7:fe:fc:dc:25:e1:be:
                    20:c6:72:74:4a:3c:11:5c:0b:08:94:23:83:ac:d7:
                    d9:ca:c1:80:14:0a:df:bd:ab:4c:49:a9:43:90:a9:
                    af:3f:59:67:0f:fb:c5:5d:0d:c5:da:4d:e2:df:be:
                    90:41:b7:87:2f:7d:d3:5c:be:71:db:99:54:12:7a:
                    4e:e3:83:d5:b1:65:31:9a:32:e2:5c:34:5d:02:70:
                    bf:b5:66:4b:2c:2a:d9:d5:04:13:c5:0b:ec:d2:15:
                    a1:ed:49:76:d5:11:2d:cb:67:e8:b0:ba:4e:ed:db:
                    bd:7a:69:6a:ce:45:5b:3f:44:38:bf:07:17:88:10:
                    4f:bd:e4:76:a3:ab:0a:9f:56:3d:86:d0:1b:f1:f8:
                    33:6a:cb:57:88:cb:85:38:66:0d:26:a2:df:ec:d0:
                    1f:80:98:c7:35:54:bb:86:0e:97:3a:cf:4d:0e:7f:
                    0a:7c:26:2e:f6:24:ef:f1:03:7b:e1:80:1e:e9:cb:
                    f8:50:58:30:b6:45:6a:4c:ca:50:ea:cb:3f:07:68:
                    8e:72:96:70:13:58:11:ac:d5:f7:96:2d:43:8c:ab:
                    72:b5:67:7c:3c:68:c5:51:fd:b9:32:ba:13:f1:55:
                    fd:20:cf:3b:ef:17:0a:f1:6f:5e:37:22:ed:ea:23:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7C:50:07:E8:E4:EF:64:7B:C4:F9:E5:28:4E:8A:52:EE:70:AE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:11:7d:5a:c6:e2:b6:f0:c7:4a:0d:c9:8a:cd:f2:09:d7:a8:
         1c:cb:30:1c:2b:ef:9a:7e:c8:0c:de:0d:e1:61:51:73:6a:d5:
         7e:85:7f:61:70:04:bd:4f:4b:39:d1:c0:2d:5c:19:4f:51:85:
         64:3f:9e:bc:a3:c9:67:2b:08:ee:d4:04:57:64:f0:8a:e5:a2:
         8f:0b:bf:60:60:01:b9:21:9c:2e:f6:c7:c6:ca:55:bb:74:2d:
         ba:9e:cc:db:72:b7:f2:98:0a:ca:66:7f:d1:cb:eb:6d:b8:8d:
         7e:27:d1:c2:47:c0:1a:89:f0:da:cb:5c:c5:fc:86:20:cc:31:
         b8:3e:86:33:60:9e:7e:1b:7a:8e:58:96:d4:84:57:cf:7b:03:
         85:53:ef:ed:6d:16:a5:77:f5:fb:da:ad:4a:b1:bd:38:8a:c2:
         e5:20:e9:c5:4b:ae:af:b3:d0:aa:4c:6a:66:73:89:6d:bf:0d:
         dc:bf:28:11:c7:80:d1:ae:4d:10:a0:72:b1:0f:13:84:9d:0c:
         47:3a:57:be:9d:13:e4:a6:79:df:4f:ca:27:70:6c:f0:8f:c5:
         1f:c1:e9:61:62:79:59:46:f7:ef:f8:ab:1d:af:e1:88:1a:b7:
         b9:bf:9a:6f:3c:21:07:98:10:71:6b:81:da:db:71:c5:8e:54:
         b8:88:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:54:23 2025 by rpki-client